Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e32de1d6-f67b-437c-a613-17eb260252f2.roa
File: e32de1d6-f67b-437c-a613-17eb260252f2.roa (raw, json)
Hash identifier: OoODUzZ3kj5eXpdDKl5yGLsGlUSK3Vhmz1kTdoVQ6+E=
Subject key identifier: 75:B9:73:50:FC:B7:AE:1D:E8:C4:1B:0F:BA:02:72:F0:00:53:ED:0F
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 6B6F48A7FB57131228116AB2C0454027F895B36E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e32de1d6-f67b-437c-a613-17eb260252f2.roa
Signing time: Thu 05 Oct 2023 00:00:00 +0000
ROA not before: Thu 05 Oct 2023 00:00:00 +0000
ROA not after: Thu 09 Nov 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:6f:48:a7:fb:57:13:12:28:11:6a:b2:c0:45:40:27:f8:95:b3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Oct 5 00:00:00 2023 GMT
Not After : Nov 9 23:59:59 2023 GMT
Subject: serialNumber=2ae71f58b1bf5e306e4d903e8385c3435c052bfdab50761602b636b993c2b078, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:af:c8:08:fd:14:d3:47:c2:43:74:71:5a:
0e:4e:11:44:d2:ca:37:13:b3:f4:3c:37:87:03:2c:
a0:9c:85:2c:3b:bb:42:f8:de:c7:05:f3:ec:52:88:
ad:76:02:52:b9:b9:e1:7b:7b:c3:ea:74:77:fe:79:
2e:7b:94:8c:ba:a3:45:46:91:b8:2e:01:7b:98:5f:
38:24:7c:46:8f:70:43:83:5e:d6:fe:94:87:fa:a8:
da:32:2f:c0:28:e2:0c:38:8c:c2:c2:2d:a8:c2:f0:
0a:23:45:47:cc:ce:1d:92:60:81:89:4e:26:fe:01:
87:c8:32:41:13:53:fd:8b:f8:10:1d:a3:93:dd:2b:
84:05:ef:56:ae:a3:31:1f:41:e8:eb:09:95:c2:e0:
d9:c3:40:64:d2:b3:05:7e:c0:7a:ef:df:b8:f0:ff:
6b:14:31:f0:3e:5f:7a:2e:18:5c:e1:63:f7:6a:9d:
df:4c:0e:79:7e:ae:ac:d1:b7:9d:84:76:cd:a5:d4:
71:1b:40:91:44:30:14:f6:43:63:9d:6b:f2:78:ad:
f0:8a:41:e6:d7:16:13:36:5e:14:1b:b4:c9:e4:a0:
0a:a1:1b:10:77:51:ba:c4:77:30:5b:f2:7e:dc:18:
8b:79:f9:6c:b5:e8:a6:98:dc:af:ab:e7:09:ba:fd:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B9:73:50:FC:B7:AE:1D:E8:C4:1B:0F:BA:02:72:F0:00:53:ED:0F
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e32de1d6-f67b-437c-a613-17eb260252f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e8:ed:77:b3:8d:61:e0:19:21:0e:0a:b2:72:3a:c6:a9:cb:
16:8c:14:92:62:f5:e0:ee:d3:4b:13:bc:27:f6:3c:e9:39:cb:
21:75:a5:a4:a5:f6:84:e0:79:36:ac:ed:48:15:c0:d8:94:9c:
0a:b4:e5:b5:6b:45:8a:b2:5e:b3:7b:28:9c:35:d5:d9:ba:62:
69:22:63:8f:ab:b1:69:ae:a0:2d:be:1b:0c:d2:33:4a:fe:21:
e1:06:2d:11:c1:36:34:19:b7:f6:e7:c4:ba:87:dd:2a:ab:c4:
ad:72:c0:a5:46:41:7a:2d:a1:38:cd:b0:54:b7:2c:ff:7b:b2:
2f:40:04:26:06:4b:d5:a4:9f:69:a5:fa:c6:76:eb:53:a5:59:
ab:ff:a7:d5:8a:b4:c0:9b:b9:8f:7e:2e:79:8a:2b:be:16:2e:
b9:7e:2d:3c:a6:be:64:3a:22:5b:d1:d0:22:30:be:36:51:c5:
df:97:ce:6c:52:99:2c:b4:3d:92:08:57:6e:8a:c4:6d:4e:eb:
ee:bb:2f:07:5a:eb:92:63:e5:b3:81:29:44:8a:bd:c1:5b:63:
72:00:59:32:0f:63:a0:74:66:48:e3:fc:ee:ba:58:ac:83:20:
8f:fe:1b:d0:04:2f:0d:9e:eb:c2:f7:d2:34:4c:f5:f6:af:71:
ab:11:1c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:31 2024 by rpki-client on console-ams.rpki-client.org